Description

The SAML Broker was recently updated [1] to support SP-Initiated SSO when using the SAML Artifact Binding.

AFAIK, the SAML specification states about IDP-Initiated SSO but using the HTTP POST Binding. However, IdP-Initiated SSO using SAML Artifact Binding is also supported by other IAM solutions.

Even though unsolicited responses are not usually recommended, the effort to support it should mainly involve making it secure by introducing additional checks when processing unsolicited responses and probably guarded by a switch in the broker configuration.

[1] #29619

Discussion

No response

Motivation

Support IdP-Initiated SSO in SAML Broker.

Details

No response